This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          4PIhiPr2+N4mGzzZSnyF011212L3jhToun7f9xy5VR0=
Subject key identifier:   8C:2B:B7:FD:1A:83:F8:41:3A:06:E8:08:65:34:0B:D2:26:61:AA:3A
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          5A
Signing time:             Mon 08 Dec 2025 05:15:27 +0000
Manifest this update:     Mon 08 Dec 2025 05:15:26 +0000
Manifest next update:     Wed 10 Dec 2025 05:15:26 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: 3LaXz9Pbt0yAFsnw/6mjU0MDEGLk//k2OdOO7ewKVIk=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Dec  8 05:15:26 2025 GMT
            Not After : Dec 10 05:15:26 2025 GMT
        Subject: CN=69365eef-cd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:fa:4e:44:80:31:82:77:9b:d3:08:77:e8:
                    4e:49:27:87:7f:d3:fb:34:0c:3f:29:35:21:af:74:
                    58:ef:fb:84:6e:f0:9f:e1:87:5b:e9:e8:36:c2:87:
                    da:1c:87:00:ef:fb:3c:36:a1:a0:53:c5:1e:fa:17:
                    94:15:00:99:21:56:d7:da:21:7d:50:02:a5:00:26:
                    64:5b:38:3a:3c:d7:76:e0:b0:1b:ef:38:b3:a3:ab:
                    1e:25:df:f0:bf:3f:b6:94:e2:24:f0:70:fd:71:a2:
                    b7:c9:5c:5d:e0:9e:c6:74:f6:a5:47:2f:7e:27:91:
                    f2:77:5d:6a:32:49:8c:74:f9:49:7a:6d:2e:cb:31:
                    a5:d7:26:8a:d6:2f:0a:e9:b7:34:b0:e6:a5:5b:80:
                    76:67:03:89:7b:43:f5:3f:5e:92:29:78:91:59:9e:
                    10:dd:94:54:a1:66:d6:18:97:50:20:d2:e2:96:6f:
                    1f:84:da:de:ce:1a:7e:cb:10:9c:3a:72:50:fb:50:
                    6f:1c:d6:5c:43:da:84:b8:9d:12:32:8d:1d:8c:f1:
                    b4:6f:ed:47:ab:fa:d9:52:45:e7:1f:fd:84:e7:f0:
                    3d:0a:69:4b:2d:b0:0d:36:e9:eb:05:4f:d6:3e:25:
                    cb:91:b8:7c:54:64:47:ef:1c:75:ef:8e:54:09:27:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:B7:FD:1A:83:F8:41:3A:06:E8:08:65:34:0B:D2:26:61:AA:3A
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:84:ef:bf:89:ad:9d:6c:e8:2a:18:cb:0d:2d:91:01:10:2c:
         d7:2d:a2:a3:b3:4b:14:db:94:da:3e:18:29:32:9b:89:d7:41:
         34:c0:36:1b:23:17:96:2a:e0:b8:46:4e:f1:64:37:82:55:1a:
         cf:70:d2:11:b1:cc:e5:3d:0b:6b:1b:27:49:ff:4a:4c:19:72:
         22:f3:ce:cc:64:49:5f:03:98:a1:f8:87:3b:b8:79:8f:38:61:
         d7:18:f2:d2:01:61:16:c6:da:bb:4c:16:1f:3e:f2:69:1a:45:
         87:2e:82:d9:bb:e5:22:89:5b:55:f4:13:6d:6d:b8:0d:59:42:
         68:51:35:6d:cd:a5:e8:a1:6e:ac:56:cb:2f:60:48:05:c9:07:
         0a:cc:39:16:41:c3:c1:15:9f:89:bd:08:da:b7:8e:70:16:b4:
         94:bf:ed:58:b2:ae:35:e5:97:b3:3a:73:f8:79:be:2e:f1:1c:
         27:79:61:6a:85:30:b9:2b:5a:fb:49:45:51:72:8b:55:d5:c7:
         0b:7d:b0:10:80:cd:3b:0e:51:92:1e:94:4d:ef:49:b9:03:5b:
         2c:e3:ef:c8:99:22:3c:e2:aa:59:75:63:12:27:d9:e9:52:bb:
         63:2a:41:82:4f:4a:76:6f:ff:dc:28:a3:e9:70:1e:03:40:9e:
         f7:bc:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:05:23 2025 by rpki-client